$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2def9971-ab10-3e53-8026-2cdba85b3633.roa File: 2def9971-ab10-3e53-8026-2cdba85b3633.roa (raw, json) Hash identifier: fspSHihH2MVoWClXwTvgRbi1qw6wWZPxATS3qWUlEmQ= Subject key identifier: A7:6E:CE:5E:FC:60:A3:21:8E:19:60:A9:DF:33:A0:D5:22:3C:42:AB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4278406E9600CCA99BFD1200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2def9971-ab10-3e53-8026-2cdba85b3633.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 72.222.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:40:6e:96:00:cc:a9:9b:fd:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=5f672363-9f61-479e-8c82-4e4817327449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3e:b9:5c:4c:61:38:16:6b:12:e9:1a:3e:49: 7e:5b:13:b2:df:e8:72:87:c0:7c:03:2a:c4:7a:b9: 05:a2:ba:64:2d:55:d2:9b:42:4d:e9:0f:7f:54:24: 89:69:3d:2d:02:ad:4e:5e:06:05:c1:98:f6:a9:6b: e2:95:52:69:ac:af:fc:41:81:d5:da:23:96:59:1f: 53:b4:18:3c:a5:04:ee:b0:c3:31:89:97:d8:4c:bf: f4:40:01:c3:89:a9:2a:6f:ee:e9:38:01:d6:bd:35: 65:0a:59:97:ad:f5:d9:6f:31:25:c8:21:f0:f0:ca: 0c:49:64:91:9f:a2:06:70:78:d8:21:9a:3e:01:85: c2:5c:fa:73:eb:58:18:c8:b4:41:48:be:65:11:6f: ab:01:cc:ac:15:b8:a4:1c:01:c1:10:99:68:25:4a: 91:88:9d:6a:e1:65:cd:71:cc:1f:05:50:f5:10:df: 0d:0c:f3:b1:93:77:f7:06:7f:6b:a2:72:fd:84:f4: 8e:ec:db:a5:e1:36:3e:79:94:20:a9:3e:db:37:90: 1b:b4:31:aa:b8:1f:0a:b6:ea:c6:dd:23:6d:50:66: 22:46:0e:0a:5b:11:4b:d6:08:28:24:36:b7:ff:8f: e9:26:df:61:e3:e4:a3:f0:17:f6:1f:61:3c:e3:be: ca:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:6E:CE:5E:FC:60:A3:21:8E:19:60:A9:DF:33:A0:D5:22:3C:42:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2def9971-ab10-3e53-8026-2cdba85b3633.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.222.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:c6:4b:0b:cb:1e:6f:fd:39:c6:05:c2:d7:85:c5:4b:48:50: df:ba:5f:6c:9d:7f:a3:0a:0c:7e:b1:2e:04:1b:57:f0:81:d5: 53:a3:17:30:63:4a:61:e4:4f:c9:6a:08:c7:08:4b:40:03:43: d5:6d:a1:fc:88:60:8b:d7:25:ab:37:dd:f8:3d:b2:96:ed:1a: 19:8f:01:bc:b7:27:29:97:47:c6:1a:8b:55:c5:17:87:22:3a: 90:e0:9a:ca:62:d0:07:0a:32:52:ec:ee:c0:a4:37:81:20:1f: c2:5f:fe:9f:ce:b2:81:78:81:ed:70:10:b3:55:e5:39:4d:f7: 3b:f4:20:cf:e9:97:e1:69:77:be:71:d8:cf:c9:da:e3:6b:72: 56:fd:10:96:e9:ab:cd:62:47:35:91:71:11:4f:8d:62:ef:3f: 1c:4f:a3:5e:f4:24:77:fd:21:a8:ec:8c:96:51:4a:f0:ef:ae: 48:ce:a3:63:5e:24:76:ac:58:1d:d5:31:7c:b5:b0:8f:79:89: 7a:de:a5:14:95:19:44:61:fe:21:61:b0:f2:88:b0:92:db:8e: 84:9e:9a:68:38:f0:59:0a:35:37:d6:63:7c:0e:57:20:24:8d: 57:6b:ba:f3:85:f7:7e:fa:45:df:cc:ca:ca:87:31:c6:24:b4: 83:c2:89:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeEBulgDMqZv9EgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk NWY2NzIzNjMtOWY2MS00NzllLThjODItNGU0ODE3MzI3NDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5D65XExhOBZrEukaPkl+WxOy3+hyh8B8AyrE erkForpkLVXSm0JN6Q9/VCSJaT0tAq1OXgYFwZj2qWvilVJprK/8QYHV2iOWWR9T tBg8pQTusMMxiZfYTL/0QAHDiakqb+7pOAHWvTVlClmXrfXZbzElyCHw8MoMSWSR n6IGcHjYIZo+AYXCXPpz61gYyLRBSL5lEW+rAcysFbikHAHBEJloJUqRiJ1q4WXN ccwfBVD1EN8NDPOxk3f3Bn9ronL9hPSO7Nul4TY+eZQgqT7bN5AbtDGquB8KturG 3SNtUGYiRg4KWxFL1ggoJDa3/4/pJt9h4+Sj8Bf2H2E8477KcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKduzl78YKMhjhlgqd8zoNUiPEKrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmRlZjk5NzEtYWIxMC0z ZTUzLTgwMjYtMmNkYmE4NWIzNjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSN6KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfGSwvLHm/9OcYFwteFxUtIUN+6X2ydf6MKDH6xLgQbV/CB1VOjFzBj SmHkT8lqCMcIS0ADQ9VtofyIYIvXJas33fg9spbtGhmPAby3JymXR8Yai1XFF4ci OpDgmspi0AcKMlLs7sCkN4EgH8Jf/p/OsoF4ge1wELNV5TlN9zv0IM/pl+Fpd75x 2M/J2uNrclb9EJbpq81iRzWRcRFPjWLvPxxPo170JHf9IajsjJZRSvDvrkjOo2Ne JHasWB3VMXy1sI95iXrepRSVGURh/iFhsPKIsJLbjoSemmg48FkKNTfWY3wOVyAk jVdruvOF9376Rd/MysqHMcYktIPCibQ= -----END CERTIFICATE-----Generated at Fri Sep 25 22:25:43 2026 by rpki-client